Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
File: lRN-mWbUuv98OSA41DMX0q-RS6c.mft (raw, json)
Hash identifier: N7fhwlXofH7/AF762Bi/z1isTUDEBx7RNBkLv3s8Jag=
Subject key identifier: 7E:A7:89:4A:C1:20:C8:40:FF:45:21:F3:87:49:9B:28:D7:BC:F1:35
Authority key identifier: 95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
Certificate issuer: /CN=95137e9966d4baff7c392038d43317d2af914ba7
Certificate serial: 019F96258E3423881CB9935DE7E9F8F96DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
Manifest number: 01AE
Signing time: Fri 24 Jul 2026 22:01:11 +0000
Manifest this update: Fri 24 Jul 2026 22:01:11 +0000
Manifest next update: Sat 25 Jul 2026 22:01:11 +0000
Files and hashes: 1: HDgTefBqgeJ6yK2VqLa7_IllQEE.roa (hash: F3flqUUV45LAA0zvxqlgQgIqdjPOQcg061mWmEfEIVI=)
2: lRN-mWbUuv98OSA41DMX0q-RS6c.crl (hash: GVGrrFAC85m1q/brR6xRF/uSse2pKInbVJGwoIR1Uqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:25:8e:34:23:88:1c:b9:93:5d:e7:e9:f8:f9:6d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95137e9966d4baff7c392038d43317d2af914ba7
Validity
Not Before: Jul 24 22:01:11 2026 GMT
Not After : Jul 25 22:01:11 2026 GMT
Subject: CN=7ea7894ac120c840ff4521f387499b28d7bcf135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f9:06:df:c5:dc:0e:67:ae:da:94:15:52:db:
35:48:f1:0a:69:75:42:14:c2:b8:5c:29:c8:02:89:
db:8e:64:8c:a9:68:24:59:81:0d:6f:96:85:bd:74:
88:a5:8a:61:69:a0:2f:df:92:90:fb:3f:75:3e:92:
f6:4d:02:3d:6a:91:af:fb:cc:76:fc:6a:10:1e:54:
a6:52:28:21:69:29:99:1c:05:76:75:12:93:1e:e1:
ba:0f:18:d1:b6:17:65:8c:d4:b4:01:49:0a:d5:7d:
45:e0:d0:a7:a6:5e:86:4f:e7:13:34:a9:5c:2f:d4:
c4:3a:ca:4d:b9:ae:df:87:eb:d7:3a:ee:8a:61:8a:
62:27:c7:d3:6e:46:e4:d5:e9:c4:d8:a6:4b:42:3d:
eb:fd:56:75:eb:89:b4:99:f2:0d:32:46:73:54:c3:
32:88:c7:1b:17:a7:1f:05:cb:55:f0:b6:3f:7b:be:
2a:b7:2c:d4:65:ad:5d:e7:bd:5a:2e:41:c5:d6:15:
09:61:f0:9f:94:0c:3e:e2:41:ae:4b:ca:ca:6a:22:
ce:c5:31:c9:99:f8:7a:49:b1:a9:f0:14:25:2b:2f:
3a:7f:b6:d4:a4:d8:3b:fc:c0:b3:0d:6e:65:bb:93:
59:72:5c:c1:c0:a8:3b:99:58:2c:83:5e:8a:cc:b6:
ef:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A7:89:4A:C1:20:C8:40:FF:45:21:F3:87:49:9B:28:D7:BC:F1:35
X509v3 Authority Key Identifier:
keyid:95:13:7E:99:66:D4:BA:FF:7C:39:20:38:D4:33:17:D2:AF:91:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRN-mWbUuv98OSA41DMX0q-RS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c98b0a-e1d1-41dd-98d3-9c667f30ff8d/1/lRN-mWbUuv98OSA41DMX0q-RS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:71:04:3a:77:24:6a:b9:77:98:52:75:87:b1:a9:8b:03:7d:
7d:03:50:d9:53:f8:f1:8d:c3:8d:a9:5a:97:72:25:e0:6e:76:
96:96:b0:4c:0b:5a:84:68:5f:d8:f8:e1:e1:2d:db:20:5b:07:
0f:e0:01:52:f5:9e:fa:e1:c0:b3:fb:7f:71:a4:6d:a7:69:39:
07:94:9e:fa:4b:48:bd:03:36:ac:84:a2:c1:d1:ef:fd:d0:72:
c5:cb:73:e0:b2:41:8a:6c:a3:b0:28:4c:e9:94:d5:89:d4:c3:
63:50:41:cd:05:06:3e:5d:1a:06:87:dc:84:45:e7:09:3f:03:
0a:35:70:ba:1f:3f:7d:02:66:ea:f1:fb:b2:97:8c:36:9d:18:
b7:54:b7:fe:13:c7:95:cc:46:ce:8f:27:07:3f:e9:09:42:b1:
33:d4:45:72:11:12:dc:fc:79:31:d3:b3:b8:36:6f:9e:48:ed:
cb:6a:0a:e3:8f:8c:e2:0b:f4:fa:41:f3:45:bf:3d:8d:49:6c:
93:fa:89:27:2d:58:8b:c3:36:13:2e:63:8b:6e:ab:91:e7:b6:
29:a6:ea:33:50:48:ee:b7:10:0d:3b:bb:e5:2b:d1:60:af:ae:
78:99:1c:98:5e:7e:06:e0:dd:10:ed:06:0e:1d:df:bd:7b:45:
f8:df:9b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:38:18 2026 by rpki-client